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(54) A system and method for operating scientific instruments over wide area networks 



(57) A method, apparatus, and article of manufac- 
ture for operating remote devices over wide area net- 
works such as the Internet. The system includes client 
computers for interacting with users to accept com- 



mands and display results, a proxy server computer for 
performing intermediate processing of commands and 
results, and a device server computer coupled to the re- 
mote device that executes the commands and gener- 
ates the results. 
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D scription 

(0001] The present invention relates to a system and 
nnethod for operating scientific instruments over wide ar- 
ea networks such as the Internet. 
[0002] Access to sophisticated scientific instruments 
Is often difficult and problematic for most researchers. 
Usually, only wealthy organizations can afford such in- 
struments, making it difficult for researchers at smaller 
or less well off organizations to perform necessary ex- 
periments. Educational institutions especially can rarely 
afford all the equipment needed to provide adequate sci- 
entific training. In addition, there are often only one or 
few such instruments available in a geographic area, or 
the world at large, requiring researchers to travel in or- 
der to use the instruments. As a result, such instruments 
may not be used effectively or continuously. 
[0003] The advent of the Internet holds the promise 
for resolving these and other problems. More specifical- 
ly. Ihe present invention solves these problems by pro- 
viding real-time access to remote devices, such as sci- 
entific instruments, using the Internet. 
[0004] To overcome the limitations in the prior art de- 
scribed above, and to overcome other limitations that 
will become apparent upon reading and understanding 
the present specification Jn accordance with the present 
invention there is now provided a method, apparatus, 
and article of manufacture for operating remote devices 
over wide area networks such as the Internet. The 
present invention allows any user on the Internet, who 
has sufficient access privileges, to execute commands 
on a remote device in real-time. The present invention 
also makes the results of the operation of the remote 
device available to any number of obsen/ers via a broad- 
cast function across the Internet. 
[0005] Viewing the present invention from one aspect, 
there is now provided a system for operating a remote 
device over a network, comprising: one or more client 
computers for interacting with one or more users to is- 
sue commands for the remote device and to receive re- 
sults from the remote device; a proxy server computer, 
coupled to the client computers, for receiving the issued 
commands from the client computers, for translating the 
issued commands, for determining whether the trans- 
lated commands can be executed, for queuing the trans- 
lated commands for the riemote device until they can be 
executed, for transforming results and status informa- 
tion received Irom the remote device into a form suitable 
for the client computer, and for transmitting the trans- 
formed results and status information to the client com- 
puters; and a device server computer, coupled to the 
proxy server computer and the remote device, for re- 
trieving the queued commands from the proxy server 
computer, for operating th remote device in accord- 
ance with retrieved commands, and for providing results 
and status information received from the remote device 
to the proxy server computer. 

[0006] Viewing the present invention from another as- 



pect, there is now provided a method for operating a re- 
mote device over a network, comprising the steps of: 
interacting with one or more users via one or more client 
computers to issue commands for the remote device 
5 and to receive results from the remote device: receiving 
the issued commands from the client computers at a 
proxy server computer, translating the issued com- 
mands, determining whether the translated commands 
can be executed, queuing the translated commands for 

10 the remote device until they can be executed, transform- 
ing results and status information received from the re- 
mote device into a form suitable for the client computer, 
and transmitting the transformed results and status in- 
formation from the proxy server computer to the client 

?5 computers; and retrieving the queued commands from 
the proxy server computer to a device server computer 
coupled to the remote device, operating the remote de- 
vice in accordance with retrieved commands, and pro- 
viding results and status information received from the 

20 remote device to the proxy server computer 

[0007] Viewing the present invention from yet another 
aspect, there is now provided a system for operating a 
remote device over a network, comprising: means for 
interacting with one or more users to issue commands 

25 for the remote device; means for determining whether 
the commands can be executed; mean for optionally 
translating the commands into a form suitable for. the 
remote device, means for optionally queuing the com- 
mands until they can be executed by the renriote device; 

30 means for operating the remote device in accordance 
with the commands; means for gathering results and 
status information from the remote device; means for 
formatting the results and status information: and 
means for providing the results and status information 

3S to the users. 

[0008] Viewing the present invention from a further 
aspect, there is now provided a method for operating a 
remote device over a network, comprising the steps of: 
interacting with one or more users to issue commands 

40 for the. remote device; determining whether the com- 
mands can be executed; optionally translating the com- 
mands into a form suitable tor the remote device, op- 
tionally queuing the commands until they can be exe- 
cuted by the remote device; operating the remote device 

45 in accordance with the commands; gathering results 
and status information from the remote device; format- 
ting the results and status information; and providing the 
results and status information to the users. 
[0009] Preferred embodiments of the present inven- 

50 tion will now be described by way of example only, with 
reference to the accompanying drawings, in which: 

FIG. 1 is an exemplary hardware environment used 
to implement the pr ferr d embodiment of the in- 
55 vention; 

FIG. 2 is a flowchart that illustrates the general logic 
of a client computer performing the steps of the 
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present invention; 

FIG. 3 is a flowchart that illustrates the general logic 
of a proxy server connputer performing the steps of 
the present invention; and s 

FIG. 4 is a flowchart that illustrates the general logic 
of a device server connputer performing the steps 
of the present invention. 

10 

Overview 

[0010] An embodiment of the present invention, 
known as Web Scope (WS), provides a system and 
method for operating remote devices over wide area '5 
networks such as the Internet. In a preferred embodi- 
ment, the Web Scope is used to provide real-time ac- 
cess to sophisticated scientific instruments that are able 
to execute commands on the behalf of remotely located 
users. 20 
[0011] Web Scope is different from existing analytic 
devices in two important areas. First, Web Scope allows 
any user on the Internet, who has been given sufficient 
access permissions, to conduct experiments in real- 
time. Using Web Scope, the user simply issues com- 25 
mands to the scientific instrument to perform, certain op- 
erations, and then receives results from each operation. 
[001 2] Depending on the nature of the instrument, the 
command set of Web Scope may vary widely. For ex- 
ample, a network-attached scanning tunnelling micro- 30 
scope (STM) may be able to scan the surface of a sam- 
ple and may be able to move atoms on a surface in re- 
sponse to the commands of remote users. In this exam- 
ple, users can issue commands to the STM to manipu- 
late the sample in real-time and respond back with im- 35 
ages of the manipulated sample. 
[0013] Second, the operation of the scientific instru- 
ment can be made available to a large, heterogeneous 
user community via a broadcast function across the In- 
ternet. As a result, any user on the Internet with view ^^o 
permissions is able to observe the operation of the sci- 
entific instrument and the progress of an experiment. 
This broadcast facility may be used for scientific as well 
as educational purposes. 

[0014] Such real-time access to remote devices over 45 
the Internet, especially sophisticated and costly scien- 
tific instruments, has the potential of making a major im- 
pact on the uses and applications of scientific instru- 
ments. In addition, embodiments of the present inven- 
tion provide the Internet with more dynamic applica- so 
tions. e.g., live content resulting from real-time experi- 
ments with the scientific instruments. 

Hardware Environment 

55 

[0015] FIG. 1 schematically illustrates an exemplary 
hardware environment used in a preferred embodiment 
of the present invention. The embodiment is implement- . 



ed using a network 100 to connect one or more client 
computers 102 to one or more server computers 104. 
In this embodiment, one of the server computers 104 
comprises a proxy server computer 104 that provides 
intermediate processing of commands for the remote 
device 106, and another of the server computers 104 
comprises a device server computer 104 that actually 
controls the remote device 106. A typical combination 
of resources may include client computers 102 that 
comprise personal computers or workstations, and 
sen/er computers 104 that comprise personal comput- 
ers, workstations, minicomputers, or mainframes. The 
network 1 00 connecting these computers may comprise 
a LAN, WAN. Internet, etc. 

[0016] Embodiments in the present invention may be 
implemented using one or more computer programs 
that are executed by the client computers 102 and/or 
server computers 104. In the exemplary embodiment of 
FIG. 1 , these computer programs include: (1) a browser 
program 108 and client command processor 110 that 
are executed by the client computers 102; (2) a proxy 
command processor program 1 1 2, a user manager pro- 
gram 114 including a an access control list (ACL) 116, 
a session manager program 118, and a task manager 
program 1 20 executed by a proxy server computer 1 04; 
and (3) a device command processor program 1 22 and 
hardware interface program 124 executed by a device 
server computer 1 04. 

[0017] Each of the computer programs comprise in- 
structions which, when read and executed by their re- 
spective computers, cause the computers to perform 
steps or elements embodying the present invention. The 
computer programs are usually embodied in or readable 
from a computer-readable device, medium, or carrier, e. 
g., a local or remote data storage device or memory de- 
vice coupled to the computer directly or coupled to the 
computer via a data communications device. 
[0018] Thus, the present invention may be imple- 
mented as a method, apparatus, or article of manufac- 
ture using standard programming and/or engineering 
techniques to produce software, firmware, hardware, or 
any combination thereof. The term "article of manufac- 
ture' (or alternatively, "computer program carrier or 
product") as used herein is intended to encompass one 
or more computer programs accessible from any de- 
vice, medium, or carrier. 

[001 9] Of course, those skilled in the art will recognize 
that the exemplary environment illustrated in FIG. 1 is 
not intended to limit the present invention. For example, 
the functions of the proxy server computer 104 and de- 
vice server computer 104 could be performed by a sin- 
gle server computer 104. Moreover, a client/server ar- 
chitecture is not required, and the present invention 
could be completely implem nted on a single computer, 
such as a workstation. Indeed, those skilled in the art 
will recognize that other alternative hardware environ- 
ments may be used without departing from the scope of 
the present invention. 
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Operation of Web Scope 

[0020] Web Scope uses a number of novel compo- 
nents in its operations. These components include a us- 
er interface, command processors, a user manager, a 
session manager, and a task manager. 

User Interface 

[0021] The user interface provided by the browser 
108 and client command processor 110 allows an Indi- 
vidual user to operate and view the current status of the 
remote device 1 06. Typically, such an interface is spe- 
cific to a particular device 106 or instrument, which may 
comprise a scanning tunnelling microscope, a tele- 
scope, a robot in a remote location, or other remotely- 
located device. Essentially, this interface reflects the 
status of a live experiment and can be invoked by mul- 
tiple users simultaneously at multiple client computers 
102. 

[0022] In preferred embodiment, the user interface 
comprises a graphical user interface (GUI) that provides 
graphical images for both controlling the remote device 
106 and viewing the results of the remote device 106. 
In addition, audio or other multimedia elements could 
be used to enhance the user s experience. 
[0023] Generally, there are two key elements a user 
can control in this interface: (1) device specific param- 
eters and (2) device operation. With regard to device 
specific parameters, the state of the remote device 106 
and its software can be said to be defined by a set of 
parameters at any moment in time. These parameters 
are usually data objects such as numbers, strings, 
Boolean variables, arrays etc. 

[0024] Note that the possible parameters are deter- 
mined by application needs and characteristics of the 
remote device 106. For example, if the remote device 
106 comprises a scanning tunnelling microscope, then, 
depending on the application, a sample can be analyzed 
by the scanning tunnelling microscope using a variety 
of parameters. Most device specific parameters are of 
static nature and do not change frequently However, a 
user may need to view a wide variety of dynamic param- 
eters in different representations and may need to ma- 
nipulate such parameters in order to conduct experi- 
ments. 

[0025] With regard to device 106 operation, the user 
interface allows users to operate the remote device 1 06 
in real-time. During such operation, commands sent to 
the device 1 06 may be acknowledged with status and 
result information. For example, if a user has control 
over the tip of a scanning tunnelling microscope, so that 
the movement of a mouse input device with the user in- 
terfac may directly control th movement of the tip in 
the microscope, which in turn directly affects the sam- 
ple. In addition, information may be transmitted back to 
the user interface to indicate th results of the operation, 
for example, indicating if the atom has followed the 
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movement of the mouse. fV/loreover, the user interface 
for the above example could include an image display 
that Shows the current structure of the sample and a 
mouse pointer could be used to interact with elements 
5 of the image display and the results are reflected in the 
image display It is also envisioned that the user inter- 
face would include other multimedia elements, such as 
audio, that would enhance the observatbns of the re- 
mote device 106. 

10 

Command Processors 

[0026] The command processors 110. 112, and 122 
are distributed components that facilitate the transmis- 

'5 ston of commands from the user to the remote device 
106 and the transmission of a cohesive stream of result 
and status information from the remote device 106 to 
the user The command processors 110, 112, and 122 
basically operate on all three levels of the architecture. 

20 i.e.. the client computers 102, the proxy server computer 
104. and the device server computer 104. 
[0027] Typically, commands are processed on an in- 
termediate machine, i.e.. the proxy server computer 
1 04, to accommodate specific features of the remote de- 

25 vice 106. There are a rich set of strategies available to 
process commands, such as translating complex com- 
mands into a sequence of basic instructions or mapping 
to different coordinate systems. 

[0028] One important feature of the command proc- 
30 essors 110, 1 1 2, and 1 22 is that each command results 
in feedback to the users. For example, when the device 
106 is a scanning tunnelling microscope, the transmis- 
sion from the user interface of an atom. movement com- 
mand ultimately results in the receipt of an acknowl- 
35 edgement at the user interface indicating whether the 
atom was moved by the device 106 or not. Moreover, 
the current state of the device 106 can be monitored by 
multiple users simultaneously. 

40 User Manager 

[0029] The user manager 114 in embodiments of the 
present invention provides for access control to the re- 
mote device 106. Naturally, a large number of users on 
the Internet may be interested in operating the remote 
device 106. In order to issue commands in a controlled 
manner, each user and/or command may have an ac- 
cess control list (ACL) 11 6 associated therewith. The us- 
er manager 114 grants or denies permissions to com- 

50 mands issued by individual users or groups of users in 
accordance with the ACL 116. Of course, the nature of 
the remote device 106 may limit the number of users 
that are able to control the remote device 1 06 at any 
point in time (typically only one user at a time can issue 

55 commands to the remote device 106), although any 
number of users my be able to observe th results and 
status Information from the device 106. 



4 



7 



EP 0 943 992 A2 



8 



Session Manager 

[0030] The session manager 118 ensures that not 
more than a maximum number of users gains control 
over the remote device 106: limits can be set on the 
number of observing users as well. The session man- 
ager 118 also terminates user sessions when the time 
period assigned to a user has been exceeded. Further- 
more, the session manager 118 also makes sure that 
updated results and status information regarding the re- 
mote device 1 06 are dispatched to all users who are cur- 
rently observing the operation of the remote device 106. 
Limited only by the bandwidth of the Internet connection, 
such observers would be able to study the operation or 
progress of the remote device 108 in real-time or sub- 
stantially close to real-time. 

TrtSk Manager 

[003 1 1 When a command from the user is authorized 
b> triu u:>cf manager 114 and session manager 118 on 
me proxy server computer 104, the task manager 120 
lb ihcn r»voKcd. The task manager 120 may translate 
the comnxind into one or more device 106 dependent 
Oub comrrumds. 

[0032) In Hddition, the task manager 1 20 stores these 
comrTVinds or sub-commands in a priority queue 126. 
Tho QitcnXy queue 126 is a temporary data structure for 
qiiptnnr) rommands before they reach the remote de- 
vico 106 lo ensure that a slow device 106 does not get 
over landed with too many commands. By adding prior- 
ities lo such a queue 126, it is possible for a super user 
lo tHko over control of the device 106 at anytime. 
(0033] The command processor 122 on the device 
server computer 1 04 polls the queue 1 26 for input, and 
foccivos one command at a time and sends it to the de- 
vice 106 via the hardware interface 124 for execution. 
Results and status information from the remote device 
106 arc sent back to the session manager 118 on the 
proxy server computer 104 by the command processor 
122. which ensures that the results and status informa- 
tion are broadcast to all observing users. A time-out 
mechanism maintained by the session manager 118 on 
the proxy server computer 104 guarantees that the us- 
ers arc informed when the remote device 106 fails to 
respond 

Logic of Web Scope 

[0034] Flowcharts that illustrate the logic of the Web 
Scope of the present invention are shown in FIGS. 2, 3 
and 4. Those skilled in the art will recognize that this 
logic is provided for illustrative purposes only and that 
different logic may be used to accomplish the same re- 
sults. 



Client Computer 

[0035] FIG. 2 is a flowchart that illustrates the general 
logic of the client computer 102 when performing the 

5 steps of the present invention. 

[0036] Block 200 represents the client computer 102 
initializing the browser 108 and command processor 
110. The browser 108 and command processor 110 are 
used to interact with the user on the client computer 1 02. 

10 Such interaction may include, inter alia, accessing serv- 
ers and pages on the Internet, including the proxy server 
computer 104 and the device server computer 104. 
[0037] Block 202 represents the client computer 102 
waiting for the next event to occur, i.e., waiting for the 

?5 riext input from the user and/or the server computers 
104 connected via the Internet. 

[0038] Block 204 is a decision block that represents 
the client computer 102 determining whether the event 
comprises the receipt of a Web Scope command in- 
20 voked by the user via the browser 108. If so, control 
transfers to block 206; otherwise, control transfers to 
block 208. 

[0039] Block 206 represents the command processor 
1 1 0 analyzing the interactions between the browser 1 08 

25 and the user, formatting a command for the remote de- 
vice 106, and then transmitting the command for the re- 
mote device 105 to the proxy server computer 104. 
Thereafter, control transfers to Block 202. 
[0040] Block 208 is a decision block that represents 

30 the client computer 102 determining whether the event 
comprises the receipt of results and status information 
from the proxy server computer 104. If so, control trans- 
fers to block 210; otherwise, control transfers to block 
212. 

35 [0041] Block 210 represents the command processor 
110 analyzing the results and status information re- 
ceived from the proxy server computer 104 regarding 
the remote device 106. formatting the information, and 
then providing the formatted information to the browser 

40 108 for display to the user on the client computer 102. 
Thereafter, control transfers to Block 202. 
[0042] Block 21 2 represents the client computer 102 
performing other processing. Thereafter, control trans- 
fers to Block 202. 

45 

Proxy Server Computer 

[0043] FIG. 3 is a flowchart that illustrates the general 
logic of the proxy server computer 104 when performing 
50 the steps of the present invention. 

[0044] Block 300 represents the proxy server compu- 
ter 104 initializing the command processor 112, user 
manager 114, session manager 118, and task manager 
120. 

55 [0045] Block 302 represents the proxy server compu- 
ter 104 waiting for the next event to occur, i.e., waiting 
for the next input from the client computer 102 and/or 
the device sen/ r computer 104. 



50 
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[0046] Block 304 is a decision block that represents 
the proxy server comput r 1 04 determining whether the 
event comprises the receipt of a comnnand from the cli- 
ent computer 102. If so, control transfers to block 306; 
otherwise, control transfers to block 314. 
[0047] Block 306 represents the command processor 
112 on the proxy server computer 104 transmitting the 
command received from the client computer 102 to the 
user manager 114. 

[0048] Block 308 represents the user manager 1 1 4 on 
the proxy server computer 1 04 analyzing the commands 
in light of its access control list 115. and determining 
whether to grant or deny permission to the user s com- 
mands based on that analysis. 

[0049] Block 310 represents the session manager 
1 1 8 on the proxy server computer 1 04 receiving the per- 
mission information from the user manager 114 and en- 
suring that the received commands can proceed based 
on, inter alia, whether the user is requesting control of 
the remote device 106, whether the user is requesting 
to observe the operation of the remote device 106, etc. 
Further, when the user has control of the remote device 
1 06, the session manager 1 1 8 terminates user sessions 
that exceed their allotted time period. 
[0050] Block 3 1 2 represents the task manager 1 20 on 
the proxy server computer 104 receiving the permission 
and authorization information from the user manager 
114 and session manager 118, and then queuing the 
commands in the priority queue 1 26 for subsequent ac- 
cess by the command processor 1 22 on the device serv- 
er computer 104. Thereafter, control transfers to Block 
302. 

[0051] Block 314 is a decision block that represents 
the proxy server computer 104 determining whether the 
event is the expiration of a timer associated with a user 
session. If so, control transfers to block 316; otherwise, 
control transfers to block 320. 

[0052] Block 316 represents the session manager 
1 1 8 analyzing the timer expiration, and then determining 
what actions should be taken, e.g., which users should 
be notified of the expiration. 

[0053] Block 318 represents the command processor 
1 1 2 on the proxy server computer 1 04 receiving the tim- 
er expiration information from the session manager ^ 1 8, 
and then distributing the information to one or more cli- 
ent computers 102 and their users. Thereatter, control 
transfers to Block 302. 

[0054] Block 320 is a decision block that represents 
the proxy server computer 1 04 determining whether the 
event comprises the receipt of results and status infor- 
mation from the command processor 122 on the device 
server computer 104. If so, control transfers to block 
322; otherwise, control transfers to block 326. 
[0055] Block 322 r pr s nts the session manager 
1 18 on the proxy server computer 104 r c iving the re- 
sults and status information from the command manag- 
er 122 on the device s rver computer 104 and deter- 
mining how to distribute such information to one or more 



client computers 102 and their users. 
[0056] Block 324 represents the command processor 
112 on the proxy server computer 104 receiving the re- 
sults and status information from the session manager 
5 118, and then distributing the information to one or more 
client computers 1 02 and their users. Thereafter, control 
transfers to Block 302. 

[0057] Block 326 represents the proxy sen/er compu- 
ter 104 performing other processing. Thereafter, control 
10 transfers to Block 302. 

Device Server Computer 

[0058] FIG. 4 is a flowchart that illustrates the general 
75 logic of the device server computer 104 when perform- 
ing the steps of the present invention. 
[0059] Block 400 represents the device server com- 
puter 104 initializing the command processor 122 and 
hardware interface 124 for the remote device 106. 
20 [0060] Block 402 represents the device server com- 
puter 1 04 waiting for the next event to occur, i.e., waiting 
for the next input from the proxy server computer 104 
and/or the remote device 106. 

[0061] Block 404 is a decision block that represents 

25 the device server computer 104 determining whether 
the event comprises the receipt of a command from the 
priority queue 126 on the proxy server computer 104. !f^ 
so, control transfers to block 406; othenwise, control 
transfers to block 412. 

30 [0062] Block 406 represents the command processor 
122 on the device server computer 104 transmitting the 
command to the hardware interface 1 24 for subsequent 
execution by the remote device 106 itself. 
[0063] Block 408 represents the hardware interface 

35 408 on the device server computer 104 formatting the 
commands for the remote device 106, and transmitting 
the formatted commands to the remote device 106.^ 
[0064] Block 410 represents the remote device 106 
coupled to the device server computer 104 executing 

40 the commands. Thereafter, control transfers to Block 
402. 

[0065] Block 412 is a decision block that represents 
the device server computer 104 determining whether 
the event comprises the receipt of results and status in- 
45 formation from the remote device 106. If so. control 
transfers to block 414; otherwise, control transfers to 
block 418. 

[0066] Block 414 represents the hardware interface 
124 on the device server computer 104 receiving the 
50 results and status information from the remote device 
106, and then transmitting the information to the com- 
mand processor 122. 

[0067] Block 41 6 represents the command processor 
122 on the device server computer 104 receiving the 
55 results and status information from the hardware inter- 
face 124, and then transmitting the information to the 
session manager 118 on the proxy server computer 104 
for subsequent distribution to one or more client com- 
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puters 102 and their users. Thereafter, control transfers 
to Block 402. 

[0068] Block 418 represents the device server com- 
puter 104 performing other processing. Thereafter, con- 
trol transfers to Block 402. 

Conclusion 

[0069] This concludes the description of the preferred 
embodiment of the invention. The following describes 
some alternative embodiments for accomplishing the 
present invention. 

[0070] For example, any type of remote device coutd 
be used with the present invention. In addition, any type 
of computer configuration and/or network configuration 
could benefit from the present invention. 
[0071] Those skilled in the art will recognize that real- 
time display of information may be augmented by the 
display of pre-recorded information. Indeed, it is antici- 
pated that user interaction with the remote device 106, 
as well as results and status information from the remote 
device 106, would be recorded for later perusal. 
[0072] In summary, the present invention discloses a 
system for operating remote devices over wide area net- 
works such as the Internet. The system includes client 
computers for interacting with users to accept com- 
mands and display results, a proxy server computer tor 
performing intermediate processing of commands and 
results, and a device server computer coupled to the re- 
mote device that executes the commands and gener- 
ates the results. 

[0073] The foregoing description of the preferred em- 
bodiment of the invention has been presented for the 
purposes of illustration and description. It is not intended 
to be exhaustive or to limit the invention to the precise 
form disclosed. Many modifications and variations are 
possible in light of the above teaching. It is intended that 
the scope of the invention be limited not by this detailed 
description, but rather by the claims appended hereto. 



Claims 

1 . A system for operating a remote device over a net- 
work, comprising: 

one or more client computers for interacting 
with one or more users to issue commands for 
the remote device and to receive results from 
the remote device; 

a proxy server computer, coupled to the client 
computers, for receiving the issued commands 
from the client computers, for translating the is- 
sued commands, for det rmining whether the 
translated commands can be executed, for 
queuing the translated commands for the re- 
mote device until they can be executed, for 



transforming results and status information re- 
ceived from the remote device into a form suit- 
able for the client computer, and for transmitting 
the transformed results and status information 
5 to the client computers; and 

a device server computer, coupled to the proxy 
server computer and the remote device, for re- 
trieving the queued commands from the proxy 
10 server computer, for operating the remote de- 

vice in accordance with retrieved commands, 
and for providing results and status information 
received from the remote device to the proxy 
server computer. 

15 

2. The system of claim 1, wherein the proxy server 
computer is coupled to client computers over the 
Internet. 

20 3. The system of claim 1, wherein the remote device 
is a scientific instrument. 

4. The system of claim 3, wherein the issued com- 
mands comprise an experiment using the scientific 

2S instrument. 

5. The system of claim 1, wherein the proxy server 
computer determines whether a user has sufficient 
access permissions for the issued commands. 

30 

6. The system of claim 1, wherein the proxy server 
computer transmits the results from the remote de- 
vice to a large, heterogeneous user community via 
a broadcast function to the client computers. 

35 

7. The system of claim 1 , wherein the client computers 
each execute a browser and a client command 
processor that allows a user to operate the remote 
device and view the results from the remote device. 

40 

8. The system of claim 1 . wherein the client computers 
each execute a command processor that allows the 
user to specify one or more parameters for the re- 
mote device. 

45 

9. The system of claim 1, wherein the client comput- 
ers, proxy server computer, and device server com- 
puter each execute a command processor that fa- 
cilitates the transmission of commands from the cli- 

50 ent computers to the remote device and results from 
the remote device to the client computers. 

10. The system of claim 1, wherein the proxy server 
computer includes a user manager for managing a 

55 collection of users and access permissions for the 
commands. 

11. The system of claim 10, wherein the user manager 
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includes an access control list for each command 
and the user manager grants and denies permis- 
sion to execute the issued commands in accord- 
ance with the access control list. 

5 

12. The system of claim 1, wherein the proxy server 
computer includes a session manager for ensuring 
that not more than a maximum number of users 
gains control over the remote device. 

10 

13. The system of claim 1, wherein the proxy server 
computer includes a session manager for ensuring 
that not more than a maximum number of users re- 
ceives the results and status information from the 
remote device. ?5 

14. The system of claim 1, wherein the proxy server 
computer includes a session manager for terminat- 
ing ci user s session operating the remote device 
wtitn ri time period has been exceeded. 

15. The sysicm of claim 1, wherein the proxy server 
compuicr includes a session manager for ensuring 

ii inc rcGults received from the remote device are 
di3p* iichcd to all users observing the operations of 2S 
no fomoio device. 

16. The sysicm of claim 1, wherein the proxy server 
rompijior includes a task manager for processing 

Inn issued commands and for storing the com- 30 
mands in a priority queue. 

17. The system of claim 15, wherein the priority queue 
is ri temporary data structure for queuing the issued 
commands before they reach the remote device. 35 

18. The system of claim 17, wherein the priority queue 
allows a "super user" to take control of the remote 
device. 

40 

19. The system of claim 16, wherein the device server 
computer includes a command processor for polling 
the priority queue, for retrieving one or more com- 
mands at a time from the polled priority queue, for 
transmitting the retrieved commands to the remote ' ^5 
devfco lor execution, and for transmitting results 
from the remote device to the proxy server compu- 
ter lor distribution to the client computers. 

20. The system of claim 19, wherein the command so 
processor transmits results from the commands to 

a session manager on the proxy server computer, 
and the session manager ensures that the results 
are broadcast to all obs rving users. 

55 

21 . A method for operating a remote device over a net- 
work, comprising the steps of: 



interacting with one or more users via one or 
more client computers to issue commands for 
the remote device and to receive results from 
the remote device; 

receiving the issued commands from the client 
computers at a proxy server computer, trans- 
lating the issued commands, determining 
whether the translated commands can be exe- 
cuted, queuing the translated commands for 
the remote device until they can be executed, 
transforming results and status information re- 
ceived from the remote device into a form suit- 
able for the client computer, and transmitting 
the transformed results and status information 
from the proxy server computer to the client 
computers; and 

retrieving the queued commands from the 
proxy server computer to a device server com- 
puter coupled to the remote device, operating 
the remote device in accordance with retrieved 
commands, and providing results and status in- 
formation received from the remote device to 
the proxy server computer. 

22. An article of manufacture comprising a computer 
program carrier readable by a computer and em- 
bodying one or more instructions executable by the 
computer to perform method steps claimed in claim 
21. 

23. A system for operating a remote device over a net- 
work, comprising: 

means for interacting with one or more users to 
issue commands for the remote device; 

means for determining whether the commands 
can be executed; 

mean for optionally translating the commands 
into a form suitable for the remote device. 

means for optionally queuing the commands 
until they can be executed by the remote de- 
vice; 

means for operating the remote device in ac- 
cordance with the commands; 

means for gathering results and status informa- 
tion from the remote device; 

means for formatting the results and status in- 
formation; and 

means for providing the results and status in- 
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formation to the users. 

24. A method for operating a remote device over a net- 
work, comprising the steps of: 

5 

interacting with one or more users to issue com- 
mands for the remote device; 

determining whether the commands can be ex- 
ecuted; 10 

optionally translating the commands into a form 
suitable for the remote device, 

optionally queuing the commands until they can '5 
be executed by the remote device; 

operating the remote device in accordance with 
the commands; 

20 

gathering results and status information from 
the remote device; - 

formatting the results and status information; 
and 25 

providing the results and status information to 
the users. 

25. An article of manufacture comprising a computer 30 
program carrier readable by a computer and em- 
bodying one or more instructions executable by the 
computer to perform method claimed in claim 24. 

35 
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